General

  • Target

    nigger sex.exe

  • Size

    32KB

  • MD5

    cac510a072cd3e80ca309f7442f5a326

  • SHA1

    0f52da782525d5ae582baac9ceb6739589c21c70

  • SHA256

    8a9c7a385608b74b8f777197ae9323b6af5be09e9346b934369b72c899d8e45b

  • SHA512

    6539c689f7e30c42aa3c478d0a41a10844c1aa4b710a28d4541741da8da77b5f2e9d75eb86442a1d248de2b9bf0e72ceca6e18bdaa46dc71921fcec8dc489bb8

  • SSDEEP

    384:7EbmX5Qa+vN1h1+X3v6JFjL+g93Tm2eaFODZzRApkFTBLTsOZwpGd2v99Ikuis8g:IVa+vNtg+PB93Tw42ZzVFE9jNOjhvbb

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

C2

127.0.0.1:4455

Mutex

23k5TWNO4gMENG8H

Attributes
  • install_file

    USB.exe

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nigger sex.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections